One useful thing to do today
Check the recipients, general access and viewing or editing role before sending the link.
More everyday safety lessonsChoose your depth. Learn at your own pace.
Understand it
You want one colleague to read a draft. A restricted invitation can give that person access. An “anyone with the link” setting may allow a forwarded link to reach readers you never chose. Check the access setting, not just the address in the message.
Viewing and editing are different permissions. Give viewing access when the person only needs to read. Use a made-up document to practise checking the recipient and removing access afterward.
Under the hood
Sharing combines an identity or audience with a role. Permissions may also come from a parent folder, group or organization policy. Removing one direct invitation may leave another route to access. Read-only access does not prevent all copying, including screenshots.
Practitioner perspective
Assign owners to shared resources and review external access over time. Validate effective permissions, including inherited grants, with an authorized test identity. Classify information before choosing sharing settings and do not put sensitive originals into public demonstrations.
Watch it work
A fictional, simplified model. Select a component to inspect it, or follow the steps in order.
A link is a route. Permission opens the file.
Example: Mira shares a fictional meeting agenda. Compare a public link with a named invitation.
The link can travel beyond the first person who receives it.
How to use this example
Select Next step to read at your own pace, or Animate step to watch one exchange. Nothing advances until you choose.
What it means
Everyday example
State in this scenario
Inspect components & read every step
- Mira
The fictional owner sharing a file in this example.
Example: Mira decides who may read the meeting agenda.
- Shared file
A document whose access is controlled by sharing settings.
Example: An agenda may be restricted to named readers or available to anyone with its link.
- New reader
Someone attempting to open a shared document.
Example: Receiving a forwarded link does not automatically grant access to a restricted file.
Anyone with the link
The link can travel beyond the first person who receives it.
- Mira Shared file: Broad access. Mira allows anyone holding the link to read the agenda.
- New reader Shared file: Forwarded link. Another person opens a forwarded copy of the link.
- Shared file New reader: File returned. The broad permission allows this reader to receive the file.
Named readers only
Forwarding a link does not add a person to a restricted access list.
- Mira Shared file: Named invitation. Mira grants viewing access only to her intended reviewer.
- New reader Shared file: Forwarded link. A different person requests the same restricted file.
- Shared file New reader: Access denied. The service checks identity and does not send the file.
Fictional teaching trace. One moving dot represents an exchange, not a measured network capture.
Open the detailed lesson walkthrough
Explore the system
Draft ready
A private draft needs one reviewer.
Read every step without animation
Broad link
- Draft ready. A private draft needs one reviewer.
- Anyone link. General access allows anyone holding the link.
- Link forwarded. People outside the intended group can open it.
Delivery and access settings are separate choices.
Restricted readers
- Choose people. Invite the intended reviewer.
- View only. Grant reading access for a review task.
- Review access. Remove the invitation after it is no longer needed.
Grant only the access the task needs.
What could go wrong
A draft staff list is shared with an unrestricted link that is forwarded beyond the intended team.
What you can do
- Check the recipients, general access and viewing or editing role before sending the link.
- Review inherited access and remove access that is no longer needed.
Common mistakes
- A difficult-to-guess link is not the same as an identity check.
- Removing access does not erase copies already downloaded.
Check your understanding
Active recall: explain this idea in 30 seconds
You want one colleague to read a draft. A restricted invitation can give that person access. An “anyone with the link” setting may allow a forwarded link to reach readers you never chose. Check the access setting, not just the address in the message.
Now give an example and name one limitation. Revisit the explanation if you get stuck.
Primary sources
Original explanations informed by these specifications and official resources. Source versions and lesson review are separate from product updates.
Content reviewed 2026-09-10. Read the editorial policy.